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I, Aaron E. Rosenberg, being duly sworn under penalty of penury depose 

and say: 

I am a resident of Sew^ tfer/^r/rs jetxy 

1 . My educational background and work experience are as set forth in 

the attached Biographical Sketch; 

2. I have read United States Patent Application Publication 
US2002/01 04027 (Skerpac), United States Patent 5,897,616 (Kanevsky) and 
United States Patent Application Publication US2002/0165894 (Kashani). 

3. I have read the Final Rejection dated December 19, 2008 in the 
pending US patent application No. 10/062,799 and understand that claim 1 
thereof is rejected as anticipated by Kanevsky. I.e. US Patent 5,897.616. 



i 

PAGE 1601 * RCVD AT 3/17/2009 12:32:41 PM (Eastern Daylight Time] ' SVR:USPTO-EFXRF-6/30 ' DNJS:2738300 ' C8ID: * DURATION (mm-ss):0340 



Mar-17-09 12:32pm From- T-580 P. 017/021 F-798 

RECEIVED 
CENTRAL FAX CENTER 

MAR 1 7 2009 

4. I understand that the rejection of claim 1 of US patent application 
No. 10/062.799 is based on the Patent Examiner's belief that Kanevsky has a 
controller that communicates with a database that generates one-time challenge 
phrases for a user to speak. 

5. Kanevsky, as set forth at column 3. lines 26 to 33. queries a 
speaker with a random question based on the information contained in an 
accessed database attributable to the speaker candidate. Examples could be the 
person's mother's maiden name or the make of the person's first car. 

6. Kanevsky does not describe a controller that communicates with a 
database that generates one-time challenge phrases for a user to speak. 
Instead, Kanevsky, at column 6, lines 25-29, states "Next, utilizing the specific 
information from the identified user's database, the server 22 generates a 
random question (or multiple random questions) for the user via link 36. The user 
answers the random question(s) which is sent back to the server 22 via link 38." 
Kanevsky does not teach that a user is to speak the generated question. 

7. I have read the rejected claim 1 of US patent application No. 
10/062,799 and understand that this claim requires a controller to communicate 
with a data base for randomly generating a one-time challenge phrase from a 
plurality of words and language rules in the data base and to deliver the one-time 
challenge phrase to a station for a user to speak. I understand that the language 
of claim 1 requires a user to repeat the one-time challenge phrase as a spoken 
response. 
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8. Claim 1 of US patent application No. 10/062,799 requires a user to 
repeat verbatim a simple, randomly selected and generated phrase. The phrase 
is generated so that it is highly unlikely to have been used previously as a 
challenge phrase. 

9. Kanevsky does not describe or teach a controller for randomly 
generating and delivering a one-time challenge phrase for a user to speak the 
one-time challenge phrase exactly; to receive a spoken response from the user 
to the delivered one-time challenge phrase and to generate a second signal 
representative of the spoken response; and to process said second signal for 
speech recognition and to issue a validation signal in response to said second 
signal exactly matching said one-time challenge phrase. 

10. In Kanevsky, the challenge phrase is intended to elicit a response 
in which a piece of personal information is embedded. The speech recognizer 
invoked to analyze the response operates in a natural language understanding 
mode. The response cannot be a verbatim repetition of the challenge phrase.ln 
claim 1 of US patent application No. 10/062.799. the spoken phrase is expected 
to be a verbatim repetition of the challenge phrase. The speech recognizer 
invoked to analyze the utterance operates in a speech verification mode with no 
understanding of the content of the phrase. 

11. I understand that claim 16 of US patent application No. 1 0/062,799 
stands rejected as being unpatentable over Kanevsky in view of Kashani and that 
the Patent Examiner, relying on paragraphs [0118] and [0119] of Kashani, 
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alleges that it would be obvious to modify Kanevsky by requiring the spoken 
answer to be exactly the same as the random question. 

12. Kanevsky requires a semantic analyzer 40 to determine if the 
answer is correct in accordance with the user's database (col. 6, lines 37-39). 
Therefore, requiring the spoken answer to be exactly the same as the random 
question, would not allow the semantic analyzer 40 of Kanevsky to determine if 
the answer is correct in accordance with the user's database. Accordingly, the 
proposed modification of Kanevsky would be contrary to the teachings of 



13. Paragraph 101 19] of Kashani states that if a user had only a single 
spoken password, then this could be recorded and played back during a security 
attack. Therefore, one of ordinary skill in the art would not be motivated to modify 
Kanevsky by requiring the spoken answer to be exactly the same as the random 



Kanevsky. 



question. 



Further deponent saith not. 




Sworn to before me 
of February 2009 



this ^T day 




\'">^-Sea1-,;V'V'. 
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